Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Adding second subnet to single WAN

    Scheduled Pinned Locked Moved General pfSense Questions
    5 Posts 2 Posters 521 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      lewis
      last edited by

      I've done quite a lot of searching and found much information but many of the posts seem to differ and I'm not sure what terminology I'm looking for at this point.

      I have a 2.4.5 firewall up and running with two interfaces, WAN and LAN. On the WAN, I have a small /29 subnet with the first IP being used on the WAN and the rest listed under firewall, virtual IP's.

      I was given another /29 that needs to be on the same WAN interface but since this firewall is in production, I'm not 100% sure how I should be doing this. I am also not sure what terminology I'm looking for to find the right article, document that would show me how to accomplish this.

      I just want the new subnet to act exaactly like the first.

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @lewis
        last edited by

        Well if this other /29 is attached to your wan. You can use any of these IPs in the /29 like you would your other vips.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        L 1 Reply Last reply Reply Quote 0
        • L
          lewis @johnpoz
          last edited by

          @johnpoz The first thing I tried was to add each new IP as additional virtual IP's but that didn't work so thought I was missing something.

          The DC does all the routing so I don't think I need to add the gateway for example.

          johnpozJ L 2 Replies Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @lewis
            last edited by

            Well get with the DC then.. If you created a IP Alias vip it would respond to arp for that IP. Sniff on your wan after you create the vip, and send some traffic to that IP from external.. Do you see it show up on pfsense wan?

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • L
              lewis @lewis
              last edited by

              @lewis I just tried again and you are right, that's all it took. Thank you for helping.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.